A BurpSuite plugin to help detect ASP.NET cookieless sessions which can often lead to XSS as described here. This plugin adds an active scanner check which test for ASP.NET cookieless sessions, and also creates a custom scanner insertion point when a cookieless sessions is present in the path of a request.